Originally Posted by
GUWonder
Increased frequency of password changes does provide some increased account security.
The trouble you have is that hackers aren't learning your passwords then hanging around before using the points - as soon as they guess or discover, then they're redeeming for items that can be used quickly (gift vouchers, immediate travel).
Changing your password 2 weeks later will stop them coming back, but normally your account will be cleaned out.
If you're going to make an effort, go for a password manager and a secure, unique password for each site you use (as well as 2 factor where available).